my computer have infacted virus

[acelai00]

my computer have infacted virus,the virus name is {UDM_StrikesBack}........an this virus is a internet file.....i have already try KaiZeR KillerV1.8 and ESET nod32 anti virus to scan,but virus is have too./......

[souravhasan]

use kaspersky, and solved this...........

[talhaawan]

kaspersky is the best

[amcti_gsm]

Avira antivirus download and update it

[xheti]

i prefere you to use kis kaspersky internet security is the best antivirus

[muzaffar shah g]

yes kaspersky is the best

[acelai00]

i have use already.but cant solved too..........

[acelai00]

and my virus name is virusMawar3.js file...........

[traxgsm]

loook hear friend...hope it is usefull for youuu.good luck

http:///vbb/showthread.php?t=525323

[amcti_gsm]

ok, no matter. First time windows xp setup with another harddisk, which harddisk haves no infacted virs. then install kesparsky or avira antivirus and update it from internet. next time your master harddisk setup with slave position which are infected virus. Now doubl clik my computer - go to, tools - Folder Options - view - and click, Show hidden files and hide protected operating systems files. Now scan your hardisk or diract delet your infacted file. Because virus alwayes in hidden positon. never u can't open it.

[DARIFBS]

Originally Posted by acelai00

my computer have infacted virus,the virus name is {UDM_StrikesBack}........an this virus is a internet file.....i have already try KaiZeR KillerV1.8 and ESET nod32 anti virus to scan,but virus is have too./......

UDM_StrikesBack or ViRusMaWar
What are the symptoms that shows your computer have been affected by UDM_StrikesBack or ViRusMaWar :

1) Task Manager have been disabled
2) Folder Option have been disabled
3) Regedit have been disabled
4) Search have been disabled
5) You can find UDM_StrikesBack.html in your drive
6) Your Internet Explorer browser shows title "VirusMawar menguCapKan SelAmaT TaHun BaRu Cina, Terutama kpd WarGa UDM+++"

What you should do to remove this virus :

1) Go to Run then type cmd
2) Paste this line in command window
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
3) Again, go to Run type regedit
4) In Registry editor find keyword "disabletaskmgr" then modify it to 0
5) Open your Task Manager and stop all process with name "wscript.exe"
6) Search for keyword "nofolderoption" then modify it to 0
7) You also may found keyword "NoFind" there, do same thing as before, modify it to 0
8) Open your Folder Option and in View tab, check for show hidden files and uncheck hide operating system files
9) Now you can delete the virus with name "ViRusMaWar3.js" which located in location such as "C:\WINDOWS\system32" , and all drive in your computer.
10) You also need to delete files named "Autorun.inf" and UDM_StrikesBack.html file in every drive and removable drive that have been connected with your PC before.
11) Lastly restart your computer and remember to restore back your Folder Option to previous setting.

best regards

[GsmTracer]

try use "trustport" another good anitivir same as kasper.. try and post results..

[acelai00]

UDM_StrikesBack or ViRusMaWar
What are the symptoms that shows your computer have been affected by UDM_StrikesBack or ViRusMaWar :

1) Task Manager have been disabled
2) Folder Option have been disabled
3) Regedit have been disabled
4) Search have been disabled
5) You can find UDM_StrikesBack.html in your drive
6) Your Internet Explorer browser shows title "VirusMawar menguCapKan SelAmaT TaHun BaRu Cina, Terutama kpd WarGa UDM+++"

What you should do to remove this virus :

1) Go to Run then type cmd
2) Paste this line in command window
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
3) Again, go to Run type regedit
4) In Registry editor find keyword "disabletaskmgr" then modify it to 0
5) Open your Task Manager and stop all process with name "wscript.exe"
6) Search for keyword "nofolderoption" then modify it to 0
7) You also may found keyword "NoFind" there, do same thing as before, modify it to 0
8) Open your Folder Option and in View tab, check for show hidden files and uncheck hide operating system files
9) Now you can delete the virus with name "ViRusMaWar3.js" which located in location such as "C:\WINDOWS\system32" , and all drive in your computer.
10) You also need to delete files named "Autorun.inf" and UDM_StrikesBack.html file in every drive and removable drive that have been connected with your PC before.
11) Lastly restart your computer and remember to restore back your Folder Option to previous setting.

best regards

thx ur solution bro,but this step[2) Paste this line in command window
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
]i have paste to command window it say command is too many????

[DARIFBS]

Originally Posted by acelai00

thx ur solution bro,but this step[2) Paste this line in command window
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
]i have paste to command window it say command is too many????

Just respect all type and will work!

[singhdeep]

just go to this link and download nod33 antivirus
after install scan ur pc with this soft
everything will be fine
gud luck
http://mirror.edskes.net/